EPSS
Percentile
57.3%
vm2 is vulnerable to Code Injection. The vulnerability exists due to lack of exception sanitization in the handleException() function which allows an attacker to inject and execute malicious code and break out of the sandboxed enviroment.
handleException()
gist.github.com/leesh3288/381b230b04936dd4d74aaf90cc8bb244
github.com/patriksimek/vm2/commit/4b22e87b102d97d45d112a0931dba1aef7eea049
github.com/patriksimek/vm2/commit/f3db4dee4d76b19869df05ba7880d638a880edd5
github.com/patriksimek/vm2/security/advisories/GHSA-ch3r-j5x3-6q2m